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c) establishing a second stream between the second process and the 
communication channel; 

d) in response to the data being written 
the data to generate encrypted data, the encrypting 
independent of any communication protocol[s] layers used 
from the first network node to the second network node 



to the first stream, encrypting 
of the data being performed 
to transport the encrypted data 



e) causing the encrypted data to be ransmitted from the first network 
node to the second network node according to the at 1 sast one communication protocol 
layer supported by the first and second network nodes; znd 

f) in response to the encrypted data being read from the second 
stream, decrypting the encrypted data to recover decrypted data which is identical to the 
data on the first network node before the data was 

decrypting of the encrypted data being performed independent of any communication 
protocols] layers used to transport the encrypted data f *om the first network node to the 
second network node. 



written to the first stream, the 



the steps of 
-] layer specific encryption 



2. (AMENDED) The method of Claim 1 , further including i 

a) performing a communication proi ocol[-] 
of the data on the first network node, and 

b) performing a communication prot|pcol[-] layer specific decryption 
of the data on the second network node. 
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step of connecting the Java secure 



4. (AMENDED) The method of Claim 1, wterein the communication channel is a 
Java secure channel, wherein the first stream is a Jajva stream, 

wherein the second stream is a Java stream, 

wherein the method further comprises the 
channel to a third Java stream, and 

wherein the third Java stream provides for tl^e transmission of data according to a 
specific communication protocol layer , 

5. (AMENDED) A computer-readable mediuri carrying one or more sequences of 
one or more instructions for providing communication protocol[-] layer independent 
security for data transmitted between a first process, executing on a first network node, 
and a second process, executing on a second network node, wherein the first network 
node and the second network node each support 
protocol layer , the one or more sequences of 
instructions which, when executed by one or more 
processors to perform the steps of: 

a) establishing a communication channel between the first network node and 
the second network node; 

b) establishing a first stream between the first process and the 
communication channel; 

c) establishing a second stream between the second process and the 
communication channel; 



a least one common communication 
qne or more instructions including 
processors, cause the one or more 
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d) in response to the data being written to 




le first stream, encrypting the data 



to generate encrypted data, the encrypting of the data being performed independent of 
any communication protocols] layers used to transport the encrypted data from the first 
network node to the second network node; 

e) causing the encrypted data to be transmi tted from the first network node to 
the second network node according to the at least one communication protocol layer 
supported by the first and second network nodes; and 

f) in response to the encrypted data beiilg read from the second stream, 
decrypting the encrypted data to recover decrypted data 
the first network node before the data was written to the 
encrypted data from the first network node to the seconc 



6. (AMENDED) The computer-readable 
computer-readable medium further includes instructions 

a) performing a communication protocol[ 
data on the first network node, and 

b) performing a communication protocol[ 
data on the second network node. 



which is identical to the data on 
first stream, the decrypting of the 
network node. 



meaiium of Claim 5, wherein the 
for performing the steps of 
layer specific encryption of the 



layer specific decryption of the 



D' 



■3\ 



8. (AMENDED) The computer-readable medium of Claim 5, wherein the 
communication channel is a Java secure channel, 

wherein the first stream is a Java stream, 

wherein the second stream is a Java stream, 
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wherein the computer-readable medium further includes instructions for 



connecting the Java secure channel to a third Java stream, and 



wherein the third Java stream provides for the transmission of data according to a 
specific communication protocol layer. 



between the first network node and 



13. (AMENDED) A computer data signal) embodied in a carrier wave and 
representing sequences of instruction which, when executed by one or more processors, 
provide communication protocol [-] layer independent security for data transmitted 
between a first process, executing on a first ne|[work node, and a second process, 
executing on a second network node, according to dt least one common communication 
protocol layer supported by the first and second network nodes, by performing the steps 
of: 

a) establishing a communication channel 
the second network node; 

b) establishing a first stream between the first process and the 
communication channel; 

c) establishing a second stream betwet 
communication channel; 

d) in response to the data being written to ihe first stream, encrypting the data 
to generate encrypted data, the encrypting of the dati being performed independent of 
any communication protocols] layers used to transpoit the encrypted data from the first 
network node to the second network node; 



3ii the second process and the 
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e) causing the encrypted data to be transmitted from the first network node to 
the second network node according to the at least one communication protocol layer 
supported by the first and second network nodes; and 

f) in response to the encrypted data bsing read from the second stream, 
decrypting the encrypted data to recover decrypted data which is identical to the data on 
the first network node before the data was written to the first stream, the decrypting of the 
encrypted data being performed independent of any communication protocols] layers 
used to transport the encrypted data from the first nepvork node to the second network 
node. 



14. (AMENDED) The computer data signal of (Claim 13, wherein the computer 
sequence of instructions further includes instructions foil performing the steps of 

a) performing a communication protocol[-]| layer specific encryption of the 
data on the first network node, and 

b) performing a communication protocol[-]| layer specific decryption of the 
data on the second network node. 



16. (AMENDED) The computer data signal of Claim 13, wherein the communication 
channel is a Java secure channel, 

wherein the first stream is a Java stream, 

wherein the second stream is a Java stream, 

wherein the computer sequence of instructions further includes instructions for 
connecting the Java secure channel to a third Java stream, and 
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wherein the third Java stream provides for the transmission of data according to a 
specific communication protocol layer . 

17. (AMENDED) A method for providing communication protocol[-] layer 
independent security for data transmitted by a process executing on a network node, the 
method comprising the steps of: 

a) establishing a stream between the process and a communication channel; 

and 

b) in response to the data being written to the stream, encrypting the data to 
generate encrypted data, the encrypting of the data being performed independent of any 
communication[s] protocol layers used to transport the encrypted data on the 
communication[s] channel. 

18. (AMENDED) The method of Claim 17, wherein the communication[s] channel is 
a Java secure channel, 

wherein the stream is a first Java stream, and 

wherein the step of establishing a stream between the process and the 
communication[s] channel further comprises the step of establishing a Java stream 
between the process and the Java secure channel. 

19. (AMENDED) The method of Claim 17, wherein the communication channel is a 
Java secure channel, wherein the stream is a Java stream, 
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^ wherein the method further comprises the step of connecting the Java secure 

channel to a second Java stream, and 



Q/^ wherein the second Java stream provides for the transmission of data according to 



a specific communication protocol layer. 




to 



Please add new claims 20-35. 



/ \ ^-—7 -^0. A method for providing communication protocol-independent security for data 



i / 

\ X 



X / transmitted between a first node and a second node, the method comprising the steps of: 
establishing a communication channel between a first network node and a second 
network node}, 

establishing a first stream from a first process to the communication channel in 
response to the establishment of the communication channel, wherein the first stream is 
encrypted after the first process and before entering the communication channel and the 
encrypted first stream is independent of any communication protocol layers; and 

establishing a second strewn from the communication channel to a second process 
in response to the establishment of \he communication channel, wherein the second 
stream is decrypted after the communication channel and before entering the second 
process. 

21. The method of claim 2^Ljyherein the encryption of the first stream and the 
decryption of the second stream jfsVpecific to a communication protocol layer. 
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The method of claim 20, wherein: 
the first stream is a first Java stream; 
the^econd stream is a second Java stream; 

the stejrof establishing a communication channel between the first network node 
and second networlrnode further comprises the step of establishing a Java secure channel 
between the first networRsnode and second network node; 

the step of establishing the first stream after the first process and before the 
communication channel further comprises the step of establishing the first Java stream 
after the first process and before the Java secure channel; and 

the step of establishing a second stream after the communication channel and 
before the second process further comprises the step of establishing the second Java 
stream after the Java secure channel and beforeNhe second process. 



23 . The method of claim 
the communication channel is 



L 



wherein: 
a Java secure channel; 



the first stream is a Jaya stream; 
the second stream is a Java stream 

the method further comprises the step of connecting the the Java secure channel to 
a third Java stream; and 

the third Java stream brovides for the transmission of data according to a specific 
communication protocol layer 
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A computer-readable medium carrying one or more sequences of one or more 
instKictions for providing communication protocol-layer independent security for data 
transmitted between a first node and a second node, the one or more sequences of one or 
more instructions including instructions which, when executed by one or more 
processors, causesthe one or more processors to perform the steps of: 

establishing ^communication channel between a first network node and a second 
network node; 

establishing a first Stream from a first process to the communication channel in 
response to the establishment of the communication channel, wherein the first stream is 
encrypted after the first process and before entering the communication channel and the 
encrypted first stream is independent o£ any communication protocol layers; and 

establishing a second stream fron^sthe communication channel to a second process 
in response to the establishment of the communication channel, wherein the second 
stream is decrypted after the communication\hannel and before entering the second 
process. ^\ 

25N Vs ^The computer-readable medium of claim 24, wherein the encryption of the first 
stream and tftexjiecryption of the second stream is specific to a communication protocol 
layer. 



The computer-readable medium of claim 24, wherein: 

the first^stream is a first Java stream; 

the second streamSfi^a second Java stream; 
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thesstep of establishing a communication channel between the first network node 
and second nehvork node further comprises the step of establishing a Java secure channel 
between the first neb*(ork node and second network node; 

the step of establishing the first stream after the first process and before the 
communication channel furth^s: comprises the step of establishing the first Java stream 
after the first process and before thesJava secure channel; and 

the step of establishing a second stream after the communication channel and 
before the second process further comprises the step of establishing the second Java 
stream after the Java secure channel and before \jie second process. 

27. The method of claim 24, wherein: 

the communication channel is a Java secure channel; 

the first stream is a Java stream; 

the second stream is a Java stream 

the method further comprises the step of connecting the Java secure channel to a 
third Java stream; and 

the third Java stream provides for the transmission of data according to a specific 
communication protocol layer. 

A communications network providing communication protocol-independent 
security fcfovdata transmitted between a first node and a second node, the communication 
network performmgthe steps of: 
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establishing a communication channel between a first network node and a second 
network node;^ 

establishing^ first stream from a first process to the communication channel in 
response to the establishment of the communication channel, wherein the first stream is 
encrypted after the first process and before entering the communication channel and the 
encrypted first stream is independent of any communication protocol layers; and 

establishing a second streamsirom the communication channel to a second process 
in response to the establishment of the communication channel, wherein the second 
stream is decrypted after the communication channel and before entering the second 
process. 

29. The communication network of claim 28, wherein the encryption of the first 
stream and the decryption of the second stream is specific to a communication protocol 
layer. 



The communication network of claim 28, wherein: 
le first stream is a first Java stream; 
the secbqd stream is a second Java stream; 

the step of establishing a communication channel between the first network node 
and second network node rarther comprises the step of establishing a Java secure channel 
between the first network node and second network node; 
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the\tep of establishing the first stream after the first process and before the 
communication channel further comprises the step of establishing the first Java stream 
after the first process and before the Java secure channel; and 

the step of establishing a second stream after the communication channel and 
before the second process furtheK comprises the step of establishing the second Java 
stream after the Java secure channel and^before the second process. 

3 1 . The communication network of claim 28, wherein: 
the communication channel is a Java secure channel; 
the first stream is a Java stream; 
the second stream is a Java stream 

the method further comprises the step of connecting the Java secure channel to a 
third Java stream; and 

the third Java stream provides for the transmission of data according to a specific 
communication protocol layer. 

32Sv A computer data signal embodied in a carrier wave and representing sequences of 
instractioiiSsWhich, when executed by one or more processor, provide communication 
protocol-independent security for data transmitted between a first node and a second 
node, by performing thfe^teps of: 

establishing a commumcation channel between a first network node and a second 
network node; 
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e^ablishing a first stream from a first process to the communication channel in 
response to tfte establishment of the communication channel, wherein the first stream is 
encrypted after tnhJirst process and before entering the communication channel and the 
encrypted first stream ^independent of any communication protocol layers; and 

establishing a seconh^stream from the communication channel to a second process 
in response to the establishment of the communication channel, wherein the second 
stream is decrypted after the communication channel and before entering the second 
process. 

33. The computer data\ignal of claim 32, wherein the encryption of the first stream 
and the decryption of the second stream is specific to a communication protocol layer. 

IQ. The computer data signal of claim 32, wherein: 
sthe first stream is a first Java stream; 
the second stream is a second Java stream; 

the step Disestablishing a communication channel between the first network node 
and second network noHe further comprises the step of establishing a Java secure channel 
between the first network n<xte and second network node; 

the step of establishin^the first stream after the first process and before the 
communication channel further compiles the step of establishing the first Java stream 
after the first process and before the Java secure channel; and 
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the step of establishing a second stream after the communication channel and 
before the second process farther comprises the step of establishing the second Java 
stream after the JavaS^cure channel and before the second process. 

35. The computer data signal of claim 32, wherein: 

the communication channel is a Java secure channel; 
the first stream is a Java stream; 
the second stream is a Java stream 

the method further comprises the step of connecting the Java secure channel to a 
third Java stream; and 

the third Java stream provides for the transmission of data according to a specific 

communication protocol layer.- . 

REMARKS 

Claims 1-8 and 13-35 are pending in the application. Claims 1-2, 4-6, 8, 13-14, 
and 16-19 are amended in response to the Examiner's Official Action dated January 28, 
2000. New claims 20-35 have been added. 

Claims 1, 2, 5, 6, 13, and 14 were rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Gillon et al., U.S. Patent 5,838,927, in view of Elgamal et al, U.S. 
Patent 5,657,390, Shaffer et al., U.S. Patent 5,784,461, and either Finkelstein et al, U.S. 
Patent 5,319,712 or Zuquete et al. This rejection is respectfully traversed. The following 
is a comparison between applied reference and the claimed invention. 

The present invention relates to a method for providing communication protocol 
layer independent security for data transmitted between two network nodes. The method 
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